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Amendments to th e riaims: 

These claims will replace all prior versions, and listings, of claims in the application; 
1-20. (Canceled) 

2 1 . (Previously presented) A program segment stored on a computer readable medium 
for cryptographically converting a digital input data block M into a digital output data block; said 
program segment comprising: 

a program portion for merging a selected part Ml of said digital input data block M with 
a first digital key Kl to produce a data block Bl which non-linearly depends on said selected part 
Ml and said first digital key Kl ; and 

a program portion for deriving said digital output block from said data block Bl and the 
remaining part of the digital input data block M, wherein said merging step is performed by 
executing a non-linear function g for non-linearly merging said selected part Ml and said first 
key Kl in a single step. 

22. (Previously presented) A program segment as claimed in claim 2 1 , comprising: 

a program portion for splitting said digital input block into said selected part Ml and a 
second part M2 before executing said program portion for merging; 

a program portion for executing a non-linear function g to merge said second block M2 
with a second key K2 in one step, producing a data block B2 as output; said non-linear function 
g" 1 being the inverse of said non-linear function g; and 
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a program portion for forming combined data from data in said data block Bl and in said 
data block B2; said digital output block being derived from said combined data, 

23. (Currently amended) A program segment as claimed in claim 21, wherein said 
program portion for merging comprises; 

a program portion for splitting said selected part Ml in a first plurality n of sub-blocks 
mo^^mn-i of substantially equal length; 

a program portion for splitting said first key Kl in said first plurality n of sub-keys 
kov-jk^i, oubptontially having equal length, the sub-key kj corresponding to the sub-block mj 7 for i 
= 0 ton-1; 

a program portion for separately processing each of said sub-blocks mi by executing for 
each of said sub-blocks mi a same non-linear function h for non-linearly merging a sub-block bi 
derived from said sub-block m\ with said corresponding sub-key kj in one, sequentially insepar- 
able step and producing said first plurality of output sub-blocks h(bi, kj); and 

a program portion for combining sub-blocks tj derived from said first plurality of said 
output sub-blocks h(bj 5 ki) to form said data block Bl. 

24. (Currently amended) A program segment as claimed in claim 22, wherein said 
program portion for executing said non-linear function g" 1 comprises: 

a program portion for splitting said second part M2 in said first plurality n of sub-blocks 
rcw.^m^-i, substantially having equal length; 



PAGE 4/12* RCVD AT 3/1412006 9:38:40 AM [Eastern Standard Time] * SVR:USPTO-EFXRF-2/16* DNIS:2738300 ' CSID:914 332 0615 * DURATION (mm-ss);03-16 



Mar-1'4-Z00e 10:48 Froni-PHILIPS ELECTRONICS ICS 914-332-0615 T-702 P. 005/012 F-985 

Serial No, 09/924,990 
Page4ofl0 | 

a program portion for splitting said key K2 in said first plurality n of sub-keys kn,. J&n-ii 
substantially having equal length, the sub-key ki corresponding to the sub-block mi, for i = n to 
2n-l; 

a program portion for executing for each of said sub-blocks m; a same non-linear function 
h' 1 for non-linearly merging a sub-block b\ derived from said sub-block mi with said 
corresponding sub-key kj and producing said first plurality of an output sub-block h" l (bj, k*); said 
function h" 1 being the inverse of said function h; and 

a program portion for combining sub-blocks t; derived from said first plurality of output 
sub-blocks h' l (bu kj) to form said data block B2. 



25. (Currently amended) A program segment as claimed in claim 23, wherein said 

sub-block bi is derived from said sub-block mj by bit-wise adding a constant pi to said sub-block 
mj, said constant pi s ubs t antial l y having equal length as said sub-block m^ 



26. (Previously presented) A program segment as claimed in claim 23, characterised in 
that said function h<bfjcj) is defined by: 

h(biJci) = (bi-kO -1 , if bj * 0, k\ * 0, and bi * 

h(bi^) = (ki)- 2 5 if bt - 0 

bCbiW-Cbf)'* ifki = 0 

h(b lV ki) - 0 ? ifbi = ki, 

where the multiplication and inverse operations are predetermined Galois Field multiplication 
and inverse operations. 
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27. (Currently amended) A program segment as claimed in claim 26, wherein deriv- 
ing said sub-blocks t\ from said output sub-blocks h(bi, Jq) comprises bit-wise adding a constant 
dj to said output sub-block h(b;,ki), said constant di s u b s tantially having equal length as said sub- 
block TDj. 

28. (Previously presented) A program segment as claimed in claim 27, wherein deriv- 
ing said sub-blocks t; from said output sub-blocks h(bi, k;) further comprises raising h(bi,ki) © dj 
to a power 2\ using said predetermined Galois Field multiplication. 

29. (Previously presented) A program segment as claimed in claim 26, wherein deriv- 
ing said sub-blocks t\ from said output sub-blocks h(bj, ki) comprises raising said output sub- 
block h(bj to a power 2 1 , using said predetermined Galois Field (GF) multiplication. 

30. (Currently amended) A program segment as claimed in claim 24, wherein said 
combined data is formed by: 

swapping the sub-blocks tj and t2n-i-i, for i = 0 to n-l^ea^ 
concat e nating th e- s wapped nub blocks . 

3 1 . (Previously presented) A program segment as claimed in claim 26, wherein said 
sub-block mj comprises eight data bits, and wherein said multiplying of two elements b and c of 
GF(2 S ) comprises executing a series of multiplications and additions in GF(2 4 ). 
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32. (Previously presented) A program segment as claimed in claim 31, wherein said 
multiplying of said two elements b and c comprises: 

representing b as ao + ai.D and c as 32 + a3.D ? where ao, ai, a2 and a3 are elements of 
GF(2 4 ), and where D is an element of GF(2 8 ) defined as a root of an irreducible polynomial k(x) 
= x 2 + x + p over GF(2 4 ), where p is an element of GF(2 4 ); and 

calculating (aoa2 + a^P) + (aia2 + aoa3 + a^XD. 

33. (Previously presented) A program segment as claimed in claim 32, wherein p is a 
root of an irreducible polynomial h(x) « x 4 + x 2 + x 2 + x + 1 over GF(2). 

34. (Previously presented) A program segment as claimed in claim 26, wherein said 
sub-block mi comprises eight data bits, and wherein calculating the inverse of an element b of 
GF(2*) comprises performing a series of calculations in GF(2 4 ). 

35. (Previously presented) A program segment as claimed in claim 34, wherein 
calculating the inverse of said element b comprises: 

representing b as ao + ai-D, where ao and ai are elements of GF(2 4 ), and where D is an 
element of GF(2 8 ) defined as a root of an irreducible polynomial k(x) = x 2 + x + p over GF(2 4 ), 
where p is an element of GF(2 4 ); and 

calculating (ao 2 + aoai + ai 2 p)' ! ((ao + ai) + aiD). 

36. (Currently amended) A processor for ciyptographically converting a digital input 
block into a digital output block; said processor comprising: 
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a first input means f or obtaining said digital input block; 
a second input means f or obtaining a first key Kl ; and 

a cryptographic processing portion means a rranged to convert the digital input block into 
the digital output block by executing a non-linear function g for non-linearly merging said 
selected part Ml and said first key Kl in one step and producing a data block Bl which non- 
iinearly depends on said selected part Ml and said first key Kl, where a selected part of said 
digital output block is derived from said data block Bl . 

37- (Currently amended) A processor as claimed in claim 36, wherein said processor 

comprises a third input means f or obtaining a second key K2, and wherein said processor is 
arranged to: 

split said digital input block into said selected part Ml and a second part M2 before 
performing said merging; 

perform a non-linear function g" 1 to merge said second block M2 with said second key K2 
in one step, producing a data block B2 as output; said non-linear function g" 1 being the inverse of 
said non-linear function g; and 

combine data from data in said data block Bl and in said data block B2; said digital 
output block being derived from said combined data. 

38. (Currently amended) A processor as claimed in claim 36, wherein said merging 

comprises: 

splitting said selected part Ml in a first plurality n of sub-blocks mo»..,m n .i of 
substantially equal length; 
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splitting said first key Kl in said first plurality n of sub-keys ko v .^n-i» substantially 
having equal length, the sub-key kj corresponding to the sub-block ra i? for i - 0 to n-1 ; and 

separately processing each of said sub-blocks m\ by executing for each of said sub-blocks 
m, a same non-linear function h for non-linearly merging a sub-block b$ derived from said sub- 
block mi with said corresponding sub-key ki in one, sequentially inseparable step and producing 
said first plurality of output sub-blocks h(b i? ki); and 

combining sub-blocks ti derived from said first plurality of said output sub-blocks h(b;, kj) 
to form said data block Bl . 



39. (Previously presented) A processor as claimed in claim 38, wherein said function 
h(bj Jo) is defined by: 

h(bi,ki) = (bj.kj)" 1 , if bi * 0, kj * 0, and bj * k s 
h(b i ,k i ) = (k0* 2 , ifbi = 0 

h(b i> k i ) = (b0' 2 > ifkj-0 
h(b i3 ki)= 0, ifbi-ki, 

where the multiplication and inverse operations are predetermined Galois Field multiplication 
and inverse operations. 

40. (Previously presented) A processor as claimed in claim 39, wherein said sub-block 
mj comprises eight data bits, and wherein said multiplying of two elements b and c of GF(2 8 ) 
comprises: 
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representing b as ao + ai.D and c as 8% + a3.D, where ao, ai, &2 and a3 are elements of 
GF(2 4 ), and where D is an element of GF(2 8 ) defined as a root of an irreducible polynomial k(x) 
= x 2 + x + p over GF(2 4 ), where p i$ an element of GFC2 4 ); and 

calculating (aoa2 + aia3p) + (aia2 + aoa3 + a^.D; 
and wherein calculating the inverse of an element b of GF(2 8 ) comprises calculating (ao 2 + aoaj + 
ai 2 P)" ! ((ao + ai) + aiD). 
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